A data encryption query method, device, system and equipment of a double-chain blockchain

Abstract

The present application relates to the technical field of blockchains, is suitable for the field of blockchain financial risk control, and particularly relates to a data encryption query method, device, system and equipment of a double-chain blockchain. The method comprises encrypting a query list, constructing an encryption function, using a first encryption function to encrypt the encrypted query list twice to obtain a first ciphertext; generating a query request according to the encryption function and the first ciphertext, sending the query request to an information chain, so that any one on-chain node of the information chain uses the encryption function to encrypt the encrypted account information in a data table stored by the information chain twice to obtain a second ciphertext set, and performing intersection operation on the first ciphertext and the second ciphertext set, and querying in the data table according to the intersection result, sending the queried account label to a query node as a query result, and determining the account label corresponding to the query list. Encryption query is realized.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of blockchain technology, and is suitable for the field of blockchain financial risk control, and in particular to a data encryption query method, device, system and equipment of a double-chain blockchain. BACKGROUND

[0002] At present, each financial institution stores user data by using alliance chain technology to realize data sharing of each financial institution. When a party financial institution needs to query user data, it needs to initiate a data query request to the on-chain node of the alliance chain. The on-chain node needs to verify the query qualification of the querying party. After confirming that the querying party has the query condition, the on-chain node searches in the data stored in the alliance chain according to the content of the data query request and returns the searched result to the querying party.

[0003] However, under the current alliance chain technology, the querying party does not want other financial institutions to know which user data it queries due to privacy protection. However, in the current alliance chain technology, the on-chain node can know the user queried by the querying party, so it is impossible to realize encrypted query of data.

[0004] Therefore, there is an urgent need for a data encryption query method of a double-chain blockchain to solve the problem that encrypted query of data cannot be realized in the prior art. SUMMARY

[0005] To solve the problems in the prior art, the embodiments of the present application provide a data encryption query method, device, system and equipment of a double-chain blockchain, which realizes that the querying node sends an encryption function to the information chain, the information chain performs encrypted query in the form of twice encryption intersection, and returns the obtained query result to the querying node.

[0006] To solve any of the above technical problems, the specific technical solutions of the present application are as follows:

[0007] On the one hand, the embodiments of the present application provide a data encryption query method of a double-chain blockchain, which is executed by a querying node and includes,

[0008] encrypting a query list and constructing a first encryption function, twice encrypting the encrypted query list by using the first encryption function to obtain a first ciphertext;

[0009] generating a first query request according to the first encryption function and the first ciphertext, the first query request being used to query a user tag corresponding to the query list in an information chain;

[0010] sending the first query request to the information chain, so that, after consensus verification of the first query request passes, any one on-chain node of the information chain respectively performs secondary encryption on a plurality of encrypted account information in a first data table stored by the information chain by using the first encryption function, to obtain a second ciphertext set, performs intersection operation on the first ciphertext and the second ciphertext set, to obtain a second ciphertext, performs query on the first data table according to the encrypted account information corresponding to the second ciphertext, to obtain an account label corresponding to the encrypted account information, establishes a corresponding relationship between the account label and the first ciphertext, and sends the account label and the corresponding relationship between the account label and the first ciphertext to the query node as a query result, wherein the first data table includes the corresponding relationship between the encrypted account information and the account label.

[0011] According to the corresponding relationship between the account label and the first ciphertext, the corresponding relationship between the first ciphertext and the query list, the account label corresponding to the query list is determined.

[0012] Based on the same inventive concept, the embodiments of the present application also provide a data encryption query method of a double-chain block chain, which is executed by an information chain, and the method comprises the following steps:

[0013] receiving a first query request sent by a query node, wherein the first query request is obtained by encrypting a query list by the query node, constructing a first encryption function, and performing secondary encryption on the encrypted query list by using the first encryption function to obtain a first ciphertext, the first query request is used for querying a user label corresponding to the query list on an information chain according to the first encryption function and the first ciphertext;

[0014] after consensus verification of the first query request passes, controlling any one on-chain node of the information chain to respectively perform secondary encryption on a plurality of encrypted account information in a first data table stored by the information chain by using the first encryption function, to obtain a second ciphertext set, performing intersection operation on the first ciphertext and the second ciphertext set, to obtain a second ciphertext, performing query on the first data table according to the encrypted account information corresponding to the second ciphertext, to obtain an account label corresponding to the encrypted account information, establishing a corresponding relationship between the account label and the first ciphertext, and the first data table includes the corresponding relationship between the encrypted account information and the account label;

[0015] sending the account label and the corresponding relationship between the account label and the first ciphertext to the query node as a query result, so that the query node determines the account label corresponding to the query list according to the corresponding relationship between the account label and the first ciphertext, the corresponding relationship between the first ciphertext and the query list.

[0016] In another aspect, the embodiments of the present application also provide a data encryption query device of a double-chain blockchain, comprising:

[0017] A query list encryption unit is configured to encrypt a query list, construct a first encryption function, and encrypt the encrypted query list twice by using the first encryption function to obtain first ciphertext;

[0018] A first query request generation unit is configured to generate a first query request according to the first encryption function and the first ciphertext, wherein the first query request is used to query a user tag corresponding to the query list on an information chain;

[0019] A first query request sending unit is configured to encrypt multiple encrypted account information in a first data table stored in the information chain twice by using the first encryption function, obtain a second ciphertext set, and perform an intersection operation on the first ciphertext and the second ciphertext set to obtain second ciphertext, query the first data table according to the encrypted account information corresponding to the second ciphertext, obtain an account tag corresponding to the encrypted account information, establish a corresponding relationship between the account tag and the first ciphertext, send the account tag and the corresponding relationship between the account tag and the first ciphertext to the query node as a query result, and the first data table comprises a corresponding relationship between the encrypted account information and the account tag;

[0020] An account tag determination unit is configured to determine an account tag corresponding to the query list according to the corresponding relationship between the account tag and the first ciphertext, the corresponding relationship between the first ciphertext and the query list, and the query list.

[0021] Based on the same inventive concept, the embodiments of the present application also provide a data encryption query device of a double-chain blockchain, comprising:

[0022] A first query request receiving unit is configured to receive a first query request sent by a query node, wherein the first query request is generated by encrypting a query list by the query node, constructing a first encryption function, encrypting the encrypted query list twice by using the first encryption function to obtain first ciphertext, and generating the first query request according to the first encryption function and the first ciphertext, and the first query request is used to query a user tag corresponding to the query list on an information chain;

[0023] The query unit is configured to, after the consensus verification of the first query request passes, control any one of the chain nodes of the information chain to perform secondary encryption on the plurality of encrypted account information in the first data table stored by the information chain by using the first encryption function, to obtain a second ciphertext set, perform intersection operation on the first ciphertext and the second ciphertext set, to obtain a second ciphertext, query the first data table according to the encrypted account information corresponding to the second ciphertext, to obtain an account label corresponding to the encrypted account information, and establish a corresponding relationship between the account label obtained by the query and the first ciphertext, wherein the first data table comprises the corresponding relationship between the encrypted account information and the account label.

[0024] The query result sending unit is configured to send the account label and the corresponding relationship between the account label and the first ciphertext to the query node as a query result, so that the query node determines the account label corresponding to the query list according to the corresponding relationship between the account label and the first ciphertext, the corresponding relationship between the first ciphertext and the query list.

[0025] In another aspect, the embodiment of the present application further provides a data encryption query system of a double-chain block chain, which comprises a query node and an information chain.

[0026] The query node performs the method executed by the query node when performing the query.

[0027] The information chain performs the method executed by the information chain when performing the query.

[0028] In another aspect, the embodiment of the present application further provides a computer device, which comprises a memory, a processor and a computer program stored in the memory, and the processor executes the computer program to implement the above method.

[0029] In another aspect, the embodiment of the present application further provides a computer readable storage medium, which stores a computer program, and the computer program is executed by the processor to implement the above method.

[0030] Finally, the embodiment of the present application further provides a computer program product, which comprises a computer program, and the computer program is executed by the processor to implement the above method.

[0031] By using the embodiment of the present application, the first data table on the information chain stores the corresponding relationship between the encrypted account information and the account label, compared with the method of storing the plaintext of the account information in the alliance chain in the prior art, the chain node of the information chain only knows the plaintext of the account label, but because the ciphertext of the account information is stored, the chain node of the information chain cannot know which account the account label specifically belongs to, so the security of the account data is ensured from the storage side of the block chain.

[0032] When the query node generates the query request, compared with the method that the query node of the alliance chain in the prior art sends the query list in plaintext, the query node of the present application sends the first ciphertext of the query list, which is obtained by the query node by twice encrypting the encrypted query list using the constructed encryption function, and the query node generates the query request according to the first ciphertext and the constructed encryption function and sends it to the information chain. Even if the query request is maliciously monitored during the sending process, the listener will obtain the ciphertext of the query list after decrypting the first ciphertext according to the encryption function, and the ciphertext is irreversible, so the listener cannot know the specific account queried by the query node, thereby ensuring the security of the query during data transmission.

[0033] When the information chain receives the query request for querying, compared with the method that the on-chain node of the alliance chain in the prior art queries according to the received plaintext query list, the present application sends the first ciphertext of the twice-encrypted query list in the query request, and the on-chain node of the information chain cannot know the specific account queried. In order to make the information chain unable to know the specific account queried, the on-chain node of the information chain of the present application performs twice encryption on the encrypted account information in the data table stored by the information chain according to the encryption function in the query request sent by the query node, and obtains a second ciphertext set. Because the first ciphertext and the second ciphertext set are both obtained by twice encrypting the encrypted account information using the encryption function constructed by the query node, the first ciphertext and the second ciphertext corresponding to the same account information should also be the same. Therefore, the on-chain node of the information chain performs intersection operation on the first ciphertext and the second ciphertext set, and obtains which encrypted account information is queried by the query node, so as to query the encrypted account information corresponding to the account label in the data table, and send the account label to the information chain. Therefore, during the query process of the information chain, the on-chain node cannot know the plaintext account queried by the query node, thereby ensuring the privacy of the query.

[0034] After the query node receives the query result returned by the information chain, it only needs to compare the correspondence between the plaintext query list and the first ciphertext, so as to determine the account label corresponding to the plaintext query list. Encryption query is realized, and the problem that data encryption query cannot be realized in the prior art is solved. BRIEF DESCRIPTION OF DRAWINGS

[0035] In order to more clearly illustrate the technical solutions in the embodiments or the prior art, the drawings needed in the embodiment or the prior art description will be briefly introduced as follows. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can also be obtained by those skilled in the art without creative labor.

[0036] Figure 1An implementation system schematic diagram of a data encryption query method of a double-chain blockchain in an embodiment of the present application is shown.

[0037] Figure 2 An implementation system schematic diagram of a data encryption query method of a double-chain blockchain in an embodiment of the present application is shown.

[0038] Figure 3 An implementation system schematic diagram of a data encryption query method of a double-chain blockchain in an embodiment of the present application is shown.

[0039] Figure 4 A process in which the query node initiates a query application to the account chain and determines the queryability thereof is shown.

[0040] Figure 5 A process in which the service gateway forwards the first query request is shown.

[0041] Figure 6 A process in which the query node queries the data provider of the information chain is shown.

[0042] Figure 7 A process in which the query node and the node of the data provider perform federated learning is shown.

[0043] Figure 8 An implementation system schematic diagram of a data encryption query method of a double-chain blockchain in an embodiment of the present application is shown.

[0044] Figure 9 An implementation system schematic diagram of a data encryption query method of a double-chain blockchain in an embodiment of the present application is shown.

[0045] Figure 10 A data flow diagram of a data encryption query system of a double-chain blockchain in an embodiment of the present application is shown.

[0046] Figure 11 An implementation system schematic diagram of a data encryption query method of a double-chain blockchain in an embodiment of the present application is shown.

[0047]

Explanation of reference numerals

[0048] 101, query node;

[0049] 102, information chain;

[0050] 103, account chain;

[0051] 104, service gateway;

[0052] 801, query list encryption unit;

[0053] 802, first query request generation unit;

[0054] 803、the first query request sending unit;

[0055] 804、the account label determining unit;

[0056] 901、the first query request receiving unit;

[0057] 902、the querying unit;

[0058] 903、the query result sending unit;

[0059] 1102、the computer device;

[0060] 1104、the processing device;

[0061] 1106、the storage resource;

[0062] 1108、the driving mechanism;

[0063] 1110、the input / output module;

[0064] 1112、the input device;

[0065] 1114、the output device;

[0066] 1116、the presentation device;

[0067] 1118、the graphical user interface;

[0068] 1120、the network interface;

[0069] 1122、the communication link;

[0070] 1124、the communication bus. DETAILED DESCRIPTION

[0071] The technical solutions in the embodiments herein will be described clearly and completely below with reference to the accompanying drawings in the embodiments herein. Obviously, the described embodiments are only part of the embodiments herein, rather than all the embodiments. Based on the embodiments herein, all the other embodiments obtained by those of ordinary skill in the art without creative effort belong to the scope of protection.

[0072] It should be noted that the terms "first", "second", and the like in the description and claims of this text and the above-mentioned drawings are used to distinguish similar objects, and do not necessarily have to describe a particular order or sequence. It should be understood that the data used in this way can be interchanged under appropriate circumstances, so that the embodiments described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion, for example, a process, method, device, product or equipment including a series of steps or units does not have to be limited to those steps or units clearly listed, but can include other steps or units not clearly listed or inherent to these processes, methods, products or equipment.

[0073] It should be noted that the acquisition, storage, use, processing and the like of data in the technical solutions of the present application comply with the relevant provisions of national laws and regulations.

[0074] As Figure 1 The embodiment system schematic diagram of the data encryption query method of the double-chain block chain in the embodiment of the present application is shown, which can include a query node 101 and an information chain 102. The query node sends a query request to the information chain 102. The on-chain nodes of the information chain 102 perform consensus verification on the query request. After the consensus verification is passed, any on-chain node processes the query request, queries in the data table stored in the information chain, and then sends the query result to the query node.

[0075] In some other embodiments of the present application, the implementation system of the data encryption query method of the double-chain block chain can further include an account chain 103. The account chain 103 stores the account information corresponding to the query node, such as the queryability of the query node. When querying, the query node 101 first sends a query application to the account chain 103. The on-chain nodes of the account chain 103 perform consensus verification on the query application. After the consensus verification is passed, the account information corresponding to the query node 101 is determined in the respective stored block, and then the account information is sent to the query node 101, so that the query node 101 judges whether it can query according to the account information. And the on-chain nodes of the account chain 103 update the account information of the query node 101 stored in their respective blocks after the query node 101 sends a query request to the information chain 102, such as updating the queryability of the query node 101. It should be noted that the account information stored in the block of the on-chain node of the account chain 103 can record more content according to actual needs, and the embodiments of the present application do not limit it.

[0076] In some other embodiments of the present application, the system for implementing the data encryption query method of the double-chain blockchain can further include a service gateway 104, configured to forward the query application sent by the query node 101 to the on-chain node of the account chain 103, and receive the account information returned by the on-chain node of the account chain 103, and forward the account information to the query node 101. The service gateway 104 can also forward the query request sent by the query node 101 to the on-chain node of the information chain 102, and receive the query result returned by the on-chain node of the information chain 102, and forward the query result to the query node 101.

[0077] In addition, it should be noted that, Figure 1 The application environment shown is only one application environment provided by the present disclosure, and other application environments can also be included in actual applications, and the present specification is not limited.

[0078] In order to solve the problems existing in the prior art, the embodiments of the present application provide a data encryption query method of a double-chain blockchain, which realizes that the query node sends an encryption function to the information chain, and the information chain performs encryption query in the form of quadratic encryption intersection, and returns the query result obtained to the query node. Figure 2 The flowchart of the data encryption query method of the double-chain blockchain is shown. The process of encryption query is described in the figure, but more or fewer operation steps can be included based on conventional or non-creative labor. The order of steps listed in the embodiments is only one of the many execution orders, and does not represent the only execution order. In actual system or device product execution, it can be executed in sequence or in parallel according to the method shown in the embodiments or the drawings. Specifically, as Figure 2 As shown, the method can be executed by the query node 101, and the method can include:

[0079] Step 201: encrypt the query list, construct a first encryption function, and use the first encryption function to perform quadratic encryption on the encrypted query list to obtain a first ciphertext;

[0080] Step 202: generate a first query request according to the first encryption function and the first ciphertext, the first query request being used to query the user label corresponding to the query list in the information chain;

[0081] Step 203: send the first query request to the information chain.

[0082] After this step, after the consensus verification of the first query request passes, any on-chain node of the information chain uses the first encryption function to perform secondary encryption on the plurality of encrypted account information in the first data table stored by the information chain respectively, obtains a second ciphertext set, performs intersection operation on the first ciphertext and the second ciphertext set, obtains a second ciphertext, queries the first data table according to the encrypted account information corresponding to the second ciphertext, obtains an account label corresponding to the encrypted account information, establishes the corresponding relationship between the account label and the first ciphertext, sends the account label and the corresponding relationship between the account label and the first ciphertext as a query result to the query node, and the first data table includes the corresponding relationship between the encrypted account information and the account label.

[0083] Step 204: determining the account label corresponding to the query list according to the corresponding relationship between the account label and the first ciphertext, the corresponding relationship between the first ciphertext and the query list.

[0084] Correspondingly, the embodiment of the application also provides a data encryption query method of a double-chain block chain, which is executed by an information chain 102, as shown in the figure. Figure 3 The method can include the following steps.

[0085] Step 301: receiving a first query request sent by a query node;

[0086] In this step, the first query request is that the query node encrypts a query list, constructs a first encryption function, performs secondary encryption on the encrypted query list by using the first encryption function to obtain a first ciphertext, and generates the first query request according to the first encryption function and the first ciphertext, the first query request is used to query a user label corresponding to the query list on an information chain;

[0087] Step 302: after the consensus verification of the first query request passes, controlling any on-chain node of the information chain to use the first encryption function to perform secondary encryption on a plurality of encrypted account information in a first data table stored by the information chain respectively, obtaining a second ciphertext set, performing intersection operation on the first ciphertext and the second ciphertext set, obtaining a second ciphertext, querying the first data table according to the encrypted account information corresponding to the second ciphertext, obtaining an account label corresponding to the encrypted account information, establishing the corresponding relationship between the account label and the first ciphertext, the first data table includes the corresponding relationship between the encrypted account information and the account label;

[0088] Step 303: send the account label and the correspondence between the account label and the first ciphertext to the query node as a query result, so that the query node determines the account label corresponding to the query list according to the correspondence between the account label and the first ciphertext, the correspondence between the first ciphertext and the query list.

[0089] With the embodiment of the application, the first data table on the information chain stores the correspondence between the encrypted account information and the account label. Compared with the method of storing the plaintext of the account information in the alliance chain in the prior art, the on-chain node of the information chain only knows the plaintext of the account label, but cannot know which account the account label belongs to because the ciphertext of the account information is stored, thereby ensuring the security of the account data from the storage side of the blockchain.

[0090] When the query node generates a query request, compared with the method of sending the plaintext of the query list by the query node of the alliance chain in the prior art, the query node of the application sends the first ciphertext of the query list, which is obtained by twice encrypting the encrypted query list by using the constructed encryption function. The query node generates a query request according to the first ciphertext and the constructed encryption function and sends the query request to the information chain. Even if the query request is maliciously monitored during transmission, the listener will obtain the ciphertext of the query list after decrypting the first ciphertext according to the encryption function, and the ciphertext is irreversible. Therefore, the listener cannot know the specific account queried by the query node, thereby ensuring the security of the query during data transmission.

[0091] When the information chain receives a query request for querying, compared with the method of the on-chain node of the alliance chain according to the received plaintext query list in the prior art, the query request sent by the application includes the first ciphertext obtained by twice encrypting the encrypted query list. The on-chain node of the information chain cannot know the specific account queried. In order to know the specific account queried by the information chain, the on-chain node of the information chain of the application performs twice encryption on the encrypted account information in the data table stored by the information chain according to the encryption function in the query request sent by the query node, to obtain a second ciphertext set. Because the first ciphertext and the second ciphertext set are obtained by twice encrypting the query node by using the constructed encryption function, the first ciphertext and the second ciphertext corresponding to the same account information should also be the same. Therefore, the on-chain node of the information chain performs intersection operation on the first ciphertext and the second ciphertext set to determine which encrypted account information is queried by the query node, thereby querying the account label corresponding to the encrypted account information in the data table and sending the account label to the information chain. Therefore, during the query process of the information chain, the on-chain node cannot know the plaintext account queried by the query node, thereby ensuring the privacy of the query.

[0092] After the query node receives the query result returned by the information chain, the query list of the plaintext is only compared with the corresponding relationship between the first ciphertext, and the account label corresponding to the query list of the plaintext can be determined. The encrypted query is realized, and the problem that the data cannot be encrypted and queried in the prior art is solved.

[0093] In the embodiment of the present application, the query list of the query node can include the identity information of the user, such as the ID card number, etc. The identity information of the plaintext can be encrypted by using a simple Hash algorithm to generate a Hash table, and the Hash table is irreversible. The ORPF function can be constructed by using the OT protocol, and the query list after encryption is encrypted again by using the ORPF function to obtain the first ciphertext.

[0094] In the embodiment of the present application, since the OPRF function generated by the OT protocol is used, the characteristics of the OPRF function make the information chain unable to know the input of the query node, and at the same time, the first ciphertext and the second ciphertext are similar to a random binary string after the output of the OPRF function, so the information chain cannot deduce the input from the output of the OPRF function. The Hash algorithm is mainly used to protect the integrity of the data.

[0095] In the embodiment of the present application, the account label can include the blacklist label of the user, for example, the financial institution can determine the blacklist label of the user according to the transaction situation, the credit situation, etc. of the user, and store the blacklist label of the user in the information chain, so that other financial institutions can query and refer to the information chain.

[0096] In the embodiment of the present application, as the user data increases, the data in the first data table will also increase, and too much data may affect the query speed. In view of this situation, a plurality of groups can be set in the first data table in the embodiment of the present application, and the group is consistent with the group in the query node, so that the query node can determine which group the query list belongs to. When querying, the query node sends the first ciphertext and the corresponding group information to the information chain, the on-chain node on the information chain determines the group corresponding to the group information in the first data table, and the encrypted account information in the group in the first data table is encrypted again by using the first encryption function to obtain the second ciphertext set. Thus, the query efficiency of the first data table is improved.

[0097] At present, under the alliance chain technology, the query and accounting of each financial institution and the data query are completed by the on-chain nodes with the same function, which causes the storage and calculation overhead of the on-chain nodes to be large. In view of this problem, according to an embodiment of the present application, a double-chain structure is adopted, and the account chain is used to store the account data of the query node, as shown in Figure 4 Before the query node initiates the query, the method further includes:

[0098] Step 401: sending a query application to the account chain;

[0099] After the account chain receives the query application, the on-chain node determines the queryability of the query node according to the query application, and in the case that the consensus verification result of the queryability is passed, the on-chain node of the account chain sends the queryability to the query node;

[0100] Step 402: in the case that the queryability is queryable, encrypting the query list.

[0101] The query node account information and the user blacklist information are distinguished through the double-chain structure, so that the huge user blacklist information does not need to be included when the account information is queried and accounted, thereby accelerating the query speed and reducing the data amount contained in the block.

[0102] In the embodiment of the application, the financial institution A can query the blacklist label of a user determined by the financial institution B from the information chain, which is equivalent to that the financial institution A uses the result of the financial institution B. In order to encourage each financial institution to share the account label determined by itself, a set of paid data sharing mechanism is proposed. Specifically, the queryability stored in the account chain is the available query times, which can be the query times purchased by the financial institution or the reward query times obtained after the financial institution shares its own account label to the information chain. The financial institution will spend one available query time for each query, and if the available query times meet the predetermined condition, the query can be performed, otherwise the query cannot be performed.

[0103] Therefore, the on-chain node of the account chain determines the available query times corresponding to the account information in the block stored by itself, and in the case that the consensus verification result of the available query times is passed, the available query times are sent to the query node;

[0104] In the case that the available query times meet the predetermined condition, the query list is encrypted.

[0105] According to an embodiment of the application, in order to forward the query application of the query node, a service gateway is further provided, and the query node sends a query application to the account chain further comprising:

[0106] The query application is sent to the service gateway, so that the service gateway publishes the query application to all on-chain nodes of the account chain.

[0107] Subsequently, the on-chain nodes of the account chain determine the available query times of the query node in respective blocks, and then respectively send the available query times to the service gateway. After receiving the available query times and the consistent endorsement results sent by a specific number of on-chain nodes, the service gateway sends the available query times to the query node, signs the query application and the endorsement results, and submits them to the consensus nodes of the account chain for accounting.

[0108] After sending the available query times to the query node, the on-chain nodes of the account chain update the available query times of the query node in respective blocks.

[0109] According to an embodiment of the present application, the service gateway can also forward the query request, specifically, as shown in the information chain before receiving the first query request sent by the query node, the method further comprises: Figure 5

[0110] Step 501: The query node sends the first query request to the service gateway;

[0111] Step 502: Receive the first query request issued by the service gateway, and broadcast the first query request to all on-chain nodes of the information chain;

[0112] Step 503: Control the on-chain nodes of the information chain to perform consensus verification on the first query request;

[0113] Step 504: Send the result of passing the consensus verification to the service gateway, so that the service gateway determines the on-chain node for processing the first query request among the on-chain nodes of the information chain, and controls the determined on-chain node to query.

[0114] In the embodiment of the present application, after the on-chain nodes of the information chain pass the consensus verification on the query request, the service gateway determines the on-chain node for processing the query request among the on-chain nodes of the information chain, and controls the on-chain node to query. Compared with the method that a random on-chain node on the information chain processes the query request, the service gateway can determine the on-chain node according to the performance of the server where the on-chain node is located, the number of users corresponding to the first ciphertext (because the query list can include the identity cards of multiple users, the query node encrypts the identity card of each user, and uses the constructed encryption function to encrypt twice to obtain the first ciphertext, so the number of users can be determined from the first ciphertext), etc. For example, the more the number of users, the stronger the performance of the server where the on-chain node is located, so as to improve the query efficiency.

[0115] ​In the embodiment of the present application, after the query node receives the query result returned by the information chain, the query node can determine the plaintext of the account label corresponding to the plaintext of the identity card number according to the correspondence between the ciphertext of the identity card number and the plaintext of the identity card number when the query node encrypts the query list, and the correspondence between the ciphertext of the identity card number and the plaintext of the account label in the query result. If the financial institution corresponding to the query node suspects the accuracy of the account label, for example, the financial institution thinks that the identity card number should have a blacklist label, but the actual query result does not have a blacklist label, then the financial institution is likely to want to know which financial institution provides this blacklist label. In view of this situation, according to an embodiment of the present application, the information chain also stores a second data table, which includes the correspondence between the encrypted account information and the data provider.

[0116] As shown in Figure 6 After the query node determines the account label corresponding to the query list, the method further includes:

[0117] Step 601: generating a second query request according to the first encryption function and the first ciphertext, the second query request being used to query the data provider corresponding to the query list;

[0118] Step 602: sending the second query request to the information chain;

[0119] After the consensus verification of the second query request is passed by the on-chain node of the information chain, any on-chain node of the information chain uses the first encryption function to perform secondary encryption on the plurality of encrypted account information in the second data table stored by the information chain respectively, to obtain a third ciphertext set, and performs intersection operation on the first ciphertext and the third ciphertext set to obtain a third ciphertext. According to the encrypted account information corresponding to the third ciphertext, the second data table is queried to obtain the data provider corresponding to the encrypted account information, the correspondence between the data provider and the first ciphertext is established, the data provider and the correspondence between the data provider and the first ciphertext are sent to the query node as the query result, and the second data table includes the correspondence between the encrypted account information and the data provider;

[0120] Step 603: determining the data provider corresponding to the query list according to the correspondence between the data provider and the first ciphertext, the correspondence between the first ciphertext and the query list.

[0121] In the embodiment of the present application, the content in the second data table can be the financial institution information recorded by the information chain after receiving the account label shared by the financial institution, and the data provider is sent to the query node after receiving the second query request of the query node. The query process is similar to the processing process of the first query request, and details are not described herein.

[0122] In the embodiments of the present application, if the financial institution corresponding to the query node believes that the account label shared by the data provider may be incorrect, the data provider can be federated to re-determine the account label of the user. Specifically, according to one embodiment of the present application, as shown in Figure 7 The method further comprises:

[0123] Step 701: initiating a federated learning application for the account label of the query list to the data provider, so that the nodes of the data provider and the query node perform federated learning for the account label, and re-determine the account label of the query list;

[0124] Step 702: sending the re-determined account label to the information chain, so that the on-chain nodes of the information chain update the re-determined account label to the first data table after passing the consensus verification of the re-determined account label.

[0125] In the embodiments of the present application, the information of the data provider recorded in the second data table stored by the information chain can further include the node of the data provider, so that the query node can perform federated learning with the data provider node.

[0126] Further, after the query node performs federated learning with the data provider node to re-determine the account information of the user, a second encryption function can be constructed, and the encrypted query list is encrypted again using the second encryption function to obtain a fourth ciphertext;

[0127] An account label update request is generated according to the second encryption function, the fourth ciphertext and the re-determined account label;

[0128] The account label update request is sent to the information chain, so that the on-chain nodes on the information chain perform secondary encryption on the plurality of encrypted account information in the first data table stored by the information chain using the second encryption function after passing the consensus verification of the account label update request, to obtain a fifth ciphertext set, and the fourth ciphertext and the fifth ciphertext set are intersected to obtain a fifth ciphertext, and the re-determined account label is updated to the first data table according to the encrypted account information corresponding to the fifth ciphertext.

[0129] According to one embodiment of the present application, because the query node re-shares the account label, the query node can obtain corresponding rewards according to the reward system, therefore, after the query node sends the re-determined account label to the information chain, the method further comprises:

[0130] The on-chain nodes of the account chain update the queryability of the query node.

[0131] In the embodiments of the present application, the on-chain node of the account chain can increase the available query times of the query node.

[0132] Based on the same inventive concept, the embodiments of the present application also provide a data encryption query device of a double-chain block chain, as shown in Figure 8 The device comprises:

[0133] A query list encryption unit 801 is configured to encrypt the query list and construct a first encryption function, and encrypt the encrypted query list twice by using the first encryption function to obtain a first ciphertext.

[0134] A first query request generation unit 802 is configured to generate a first query request according to the first encryption function and the first ciphertext, and the first query request is used to query the user label corresponding to the query list on the information chain.

[0135] A first query request sending unit 803 is configured to send the first query request to the information chain, so that after the consensus verification of the first query request is passed, any on-chain node of the information chain encrypts the plurality of encrypted account information in the first data table stored by the information chain respectively twice by using the first encryption function to obtain a second ciphertext set, and the intersection of the first ciphertext and the second ciphertext set is obtained to obtain a second ciphertext, the corresponding encrypted account information of the second ciphertext is queried in the first data table to obtain an account label corresponding to the encrypted account information, the corresponding relationship between the account label and the first ciphertext is established, the account label and the corresponding relationship between the account label and the first ciphertext are sent to the query node as a query result, and the first data table comprises the corresponding relationship between the encrypted account information and the account label.

[0136] An account label determination unit 804 is configured to determine the account label corresponding to the query list according to the corresponding relationship between the account label and the first ciphertext, the corresponding relationship between the first ciphertext and the query list, and the query list.

[0137] Based on the same inventive concept, the embodiments of the present application also provide a data encryption query device of a double-chain block chain, as shown in Figure 9 The device comprises:

[0138] The first query request receiving unit 901 is configured to receive a first query request sent by a query node, the first query request is that the query node encrypts a query list, constructs a first encryption function, uses the first encryption function to encrypt the encrypted query list twice to obtain first ciphertext, the first query request is used to query a user tag corresponding to the query list on an information chain according to the first encryption function and the first ciphertext;

[0139] The query unit 902 is configured to, after consensus verification of the first query request passes, control any one on-chain node of the information chain to use the first encryption function to encrypt a plurality of encrypted account information in a first data table stored by the information chain respectively twice to obtain a second ciphertext set, and perform intersection operation on the first ciphertext and the second ciphertext set to obtain second ciphertext, and query the first data table according to the encrypted account information corresponding to the second ciphertext to obtain an account tag corresponding to the encrypted account information, and establish a corresponding relationship between the account tag and the first ciphertext.

[0140] The query result sending unit 903 is configured to send the account tag and the corresponding relationship between the account tag and the first ciphertext to the query node as a query result, so that the query node determines an account tag corresponding to the query list according to the corresponding relationship between the account tag and the first ciphertext, the first ciphertext and the corresponding relationship between the query list.

[0141] Since the principle of solving the problem of the above device is similar to that of the above method, the implementation of the above device can be referred to the implementation of the above method, and the repeated parts will not be described.

[0142] Based on the same inventive concept, the embodiments also provide a data encryption query system of a double-chain block chain, which includes a query node, an information chain and an account chain. Figure 10 As shown in the data flow diagram of the data encryption deletion system of the double-chain block chain, the system can include the following steps:

[0143] Step 1001: The query node sends a query application to the account chain.

[0144] Step 1002: The account chain determines the queryability of the query node and sends the queryability to the query node.

[0145] Step 1003: The query node sends a first query request to the information chain in the case that the queryability is queryable.

[0146] Step 1004: The information chain queries a first data table stored by the information chain according to the first query request to obtain a query result.

[0147] Step 1005: The information chain sends the query result to the query node;

[0148] Step 1006: The query node determines the account label in the query result;

[0149] Step 1007: The query node sends a second query request to the information chain;

[0150] Step 1008: The information chain queries in the stored second data table according to the second query request, and obtains a query result;

[0151] Step 1009: The information chain sends the query result to the query node;

[0152] Step 1010: The query node determines the data provider in the query result;

[0153] Step 1011: The query node performs federated learning with the data provider, and re-determines the account label;

[0154] Step 1012: The query node generates an account label update request;

[0155] Step 1013: The query node sends the account label update request to the information chain;

[0156] Step 1014: The information chain updates the re-determined account label into the first data table, and updates the information of the query node into the second data table;

[0157] Step 1015: The query node notifies the account chain to update the query availability;

[0158] Step 1016: The account chain updates the query availability of the query node.

[0159] It should be noted that, Figure 10 The detailed steps in the data flow diagram are consistent with the foregoing description, and will not be described here.

[0160] As Figure 11A structural schematic diagram of a computer device according to an embodiment of the present application is shown. The device in the present application can be a computer device in the present embodiment, which executes the method of the present application described above. The computer device 1102 can include one or more processing devices 1104, such as one or more central processing units (CPUs), each of which can implement one or more hardware threads. The computer device 1102 can also include any storage resources 1106 for storing any kind of information, such as code, settings, data, etc. Without limitation, for example, the storage resources 1106 can include any one or combination of the following: any type of RAM, any type of ROM, a flash memory device, a hard disk, an optical disk, etc. More generally, any storage resource can store information using any technology. Further, any storage resource can provide volatile or non-volatile retention of information. Further, any storage resource can represent a fixed or removable component of the computer device 1102. In one case, the computer device 1102 can perform any operation of the associated instructions when the processing device 1104 executes the associated instructions stored in any storage resource or combination of storage resources. The computer device 1102 also includes one or more drive mechanisms 1108, such as a hard disk drive mechanism, an optical disk drive mechanism, etc., for interacting with any storage resources.

[0161] The computer device 1102 can also include an input / output module 1110 (I / O) for receiving various inputs (via input devices 1112) and for providing various outputs (via output devices 1114). One particular output mechanism can include a presentation device 1116 and an associated graphical user interface (GUI) 1118. In other embodiments, the input / output module 1110 (I / O), the input devices 1112, and the output devices 1114 can also not be included, just as a computer device in a network. The computer device 1102 can also include one or more network interfaces 1120 for exchanging data with other devices via one or more communication links 1122. One or more communication buses 1124 couple the above-described components together.

[0162] The communication links 1122 can be implemented in any manner, such as through a local area network, a wide area network (e.g., the Internet), a point-to-point connection, etc., or any combination thereof. The communication links 1122 can include any combination of hardwired links, wireless links, routers, gateway functionality, name servers, etc., governed by any protocol or combination of protocols.

[0163] The embodiments herein also provide a computer readable storage medium, which stores a computer program, and the computer program is executed by a processor to implement the method described above.

[0164] The embodiments herein also provide a computer readable instruction, wherein the program in the computer readable instruction, when executed by a processor, causes the processor to perform the above-described method.

[0165] It should be understood that the size of the serial number of the processes described above in the various embodiments herein does not mean the order of execution, and the execution order of the processes should be determined according to its function and inherent logic, and should not constitute any limitation on the implementation process of the embodiments herein.

[0166] It should also be understood that in the embodiments herein, the term "and / or" is only a description of the association relationship of the associated objects, which means that there can be three relationships. For example, A and / or B can represent three cases of A alone, A and B together, and B alone. In addition, the character " / " in this paper generally represents that the front and rear associated objects are in an "or" relationship.

[0167] Those skilled in the art can realize that the units and algorithm steps of the examples described in combination with the embodiments disclosed herein can be realized in electronic hardware, computer software or a combination of both. In order to clearly illustrate the interchangeability of hardware and software, the components and steps of the examples have been described in the above description in general terms. Whether the functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. A person skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this paper.

[0168] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the system, device and unit described above can refer to the corresponding process in the foregoing method embodiments, which will not be repeated here.

[0169] In several embodiments provided herein, it should be understood that the disclosed system, device and method can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of the units is only a logical function division, and actual implementation can have another division manner, for example, a plurality of units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the displays or discussed can be indirect coupling or communication connection through some interfaces, devices or units, and can also be electrical, mechanical or other forms of connection.

[0170] The units described as separate components may or may not be physically separate, and the components displayed as units may or may not be physical units, i.e. may be located in one place, or may be distributed on multiple network units. Part or all of the units may be selected according to actual needs to achieve the purpose of the embodiments of the present application.

[0171] In addition, each functional unit in each embodiment herein can be integrated in one processing unit, or each unit can be physically present alone, or two or more units can be integrated in one unit. The integrated unit can be realized in the form of hardware or in the form of a software functional unit.

[0172] The integrated unit, if realized in the form of a software functional unit and sold or used as an independent product, can be stored in a computer readable storage medium. Based on this understanding, the technical solutions herein, essentially or the part of the prior art that contributes to the technical solutions, or all or part of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium, and includes a number of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in each embodiment herein. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), a magnetic disk or an optical disk, and various program code storage media.

[0173] The principles and implementation manners of the present application are described in the specific embodiments herein, and the above embodiment descriptions are only used to help understand the methods and core ideas thereof; meanwhile, for those skilled in the art, according to the ideas herein, the specific implementation manners and application ranges will have changes, and the above description of the present application should not be understood as a limitation.

Claims

1. A data encryption query method of a double-chain blockchain, characterized in that, The method is executed by a query node, and the method comprises: encrypting a query list, and constructing a first encryption function, and performing secondary encryption on the encrypted query list by using the first encryption function to obtain first ciphertext; generating a first query request according to the first encryption function and the first ciphertext, the first query request being used for querying a user tag corresponding to the query list in an information chain; sending the first query request to the information chain, so that, after consensus verification of the first query request is passed, any one on-chain node of the information chain performs secondary encryption on a plurality of encrypted account information in a first data table stored by the information chain by using the first encryption function to obtain a second ciphertext set, and performs intersection operation on the first ciphertext and the second ciphertext set to obtain second ciphertext, and according to the encrypted account information corresponding to the second ciphertext, querying in the first data table to obtain an account tag corresponding to the encrypted account information, establishing a corresponding relationship between the account tag and the first ciphertext, and sending the account tag and the corresponding relationship between the account tag and the first ciphertext as a query result to the query node, the first data table comprising a corresponding relationship between the encrypted account information and the account tag; determining the account tag corresponding to the query list according to the corresponding relationship between the account tag and the first ciphertext, the corresponding relationship between the first ciphertext and the query list.

2. The method of claim 1, wherein, The method further comprises: sending a query application to an account chain, so that an on-chain node of the account chain determines query availability of a query node according to the query application, and sends the query availability to the query node in a case where consensus verification of the query availability is passed; encrypting the query list in a case where the query availability is queryable.

3. The method of claim 2, wherein, The query application comprises account information of the query node, and the query availability comprises a number of available queries; After sending the query application to the account chain, the method further comprises: the on-chain node of the account chain determines the number of available queries corresponding to the account information in a block stored by the on-chain node, and sends the number of available queries to the query node in a case where consensus verification of the number of available queries is passed; encrypting the query list in a case where the number of available queries meets a predetermined condition.

4. The method of claim 3, wherein, The method further comprises: sending the query application to a service gateway, so that the service gateway publishes the query application to all on-chain nodes of the account chain.

5. The method of claim 4, wherein, After sending the query application to the service gateway, the method further comprises: the on-chain node of the account chain sends the number of available queries to the service gateway, so that, after the service gateway receives a number of available queries and a consistent endorsement result sent by a specific number of on-chain nodes, the service gateway sends the number of available queries to the query node.

6. The method of claim 5, wherein, After the query node receives the number of available queries, the method further comprises: the on-chain node of the account chain updates the number of available queries in the respective block.

7. The method of claim 4, wherein, The sending the first query request to the information chain further includes: The sending the first query request to the service gateway, so that the service gateway publishes the first query request to all on-chain nodes on the information chain; so that the service gateway determines an on-chain node for processing the first query request among the on-chain nodes of the information chain and controls the determined on-chain node to query, in a case where a result of consensus verification of the first query request is passed.

8. The method of claim 1, wherein, After determining the account label corresponding to the query list, the method further includes: generating a second query request according to the first encryption function and the first ciphertext, the second query request being used to query a data provider corresponding to the query list; sending the second query request to the information chain, so that, after consensus verification of the second query request is passed, any one on-chain node of the information chain performs secondary encryption on a plurality of encrypted account information in a second data table stored by the information chain by using the first encryption function, to obtain a third ciphertext set, performs an intersection operation on the first ciphertext and the third ciphertext set, to obtain a third ciphertext, performs a query on the second data table according to encrypted account information corresponding to the third ciphertext, to obtain a data provider corresponding to the encrypted account information, establishes a corresponding relationship between the data provider and the first ciphertext, and sends the data provider and the corresponding relationship between the data provider and the first ciphertext as a query result to the query node, the second data table including a corresponding relationship between the encrypted account information and the data provider; determining the data provider corresponding to the query list according to the corresponding relationship between the data provider and the first ciphertext, the corresponding relationship between the first ciphertext and the query list, and the query list.

9. The method of claim 8, wherein, The method further includes: initiating a federated learning application for the account label of the query list to the data provider, so that nodes of the data provider and the query node perform federated learning for the account label, and redetermine the account label of the query list; sending the redetermined account label to the information chain, so that, after consensus verification of the redetermined account label is passed, the on-chain nodes of the information chain update the redetermined account label into the first data table.

10. The method of claim 9, wherein, The method further includes: constructing a second encryption function and performing secondary encryption on the encrypted query list by using the second encryption function, to obtain a fourth ciphertext; generating an account label update request according to the second encryption function, the fourth ciphertext, and the redetermined account label; The account label update request is sent to the information chain, so that after the consensus verification of the account label update request passes, any on-chain node of the information chain performs secondary encryption on the plurality of encrypted account information in the first data table stored by the information chain by using the second encryption function, to obtain a fifth ciphertext set, and the fourth ciphertext and the fifth ciphertext set are intersected to obtain a fifth ciphertext, and the account label re-determined is updated into the first data table according to the encrypted account information corresponding to the fifth ciphertext.

11. The method of claim 9, wherein, Before the second query request is generated according to the first encryption function and the first ciphertext, the method further comprises: sending a query application to the account chain, so that the on-chain nodes of the account chain determine the queryability of the query node according to the query application, and send the queryability to the query node when the consensus verification result of the on-chain nodes of the account chain on the queryability is passed; in the case that the queryability is queryable, generating a second query request according to the first encryption function and the first ciphertext.

12. The method of claim 11, wherein, After the re-determined account label is sent to the information chain, the method further comprises: the on-chain nodes of the account chain update the queryability of the query node.

13. A data encryption query method of a double-chain blockchain, characterized by, The method executed by the information chain comprises: receiving a first query request sent by a query node, the first query request being generated according to that the query node encrypts a query list, constructs a first encryption function, and performs secondary encryption on the encrypted query list by using the first encryption function to obtain a first ciphertext, the first query request being used for querying the user label corresponding to the query list on the information chain; after the consensus verification of the first query request passes, controlling any on-chain node of the information chain to perform secondary encryption on the plurality of encrypted account information in the first data table stored by the information chain by using the first encryption function, to obtain a second ciphertext set, and the first ciphertext and the second ciphertext set are intersected to obtain a second ciphertext, and the first data table is queried according to the encrypted account information corresponding to the second ciphertext to obtain the account label corresponding to the encrypted account information, and the corresponding relationship between the account label and the first ciphertext is established, and the first data table comprises the corresponding relationship between the encrypted account information and the account label; sending the account label and the corresponding relationship between the account label and the first ciphertext to the query node as a query result, so that the query node determines the account label corresponding to the query list according to the corresponding relationship between the account label and the first ciphertext, the corresponding relationship between the first ciphertext and the query list, and the query list.

14. The method of claim 13, wherein, Before receiving the first query request sent by the query node, the method further comprises: the query node sends the first query request to a service gateway; receiving the first query request published by the service gateway, and broadcasting the first query request to all on-chain nodes of the information chain; controlling the on-chain nodes of the information chain to perform consensus verification on the first query request; Send the result of passing the consensus verification to the service gateway, so that the service gateway determines the on-chain node processing the first query request in the chain node of the information chain, and controls the determined on-chain node to query.

15. The method of claim 13, wherein, The first query request is a query application sent by the query node to the account chain, and is obtained after the query list is encrypted in the case that the account chain determines that the query node is queryable according to the query application.

16. The method of claim 13, wherein, After sending the query result to the query node, the method further comprises: Receiving a second query request sent by the query node, wherein the second query request is generated according to the first encryption function and the first ciphertext after the query node determines the account label corresponding to the query list, and the second query request is used to query the data provider corresponding to the query list; Control the on-chain node of the information chain to perform consensus verification on the second query request; After the consensus verification of the first query request passes, control any on-chain node of the information chain to perform secondary encryption on the plurality of encrypted account information in the second data table stored by the information chain using the first encryption function, to obtain a third ciphertext set, and perform intersection operation on the first ciphertext and the third ciphertext set to obtain a third ciphertext, query the second data table according to the encrypted account information corresponding to the third ciphertext, obtain the data provider corresponding to the encrypted account information, and suggest the corresponding relationship between the queried data provider and the first ciphertext, wherein the second data table comprises the corresponding relationship between the encrypted account information and the data provider; Send the data provider and the corresponding relationship between the data provider and the first ciphertext to the query node as the query result, so that the query node determines the data provider corresponding to the query list according to the corresponding relationship between the data provider and the first ciphertext, the first ciphertext and the corresponding relationship between the query list.

17. The method of claim 16, wherein, After sending the data provider and the corresponding relationship between the data provider and the first ciphertext to the query node as the query result, the method further comprises: Receiving a re-determined account label sent by the query node, wherein the re-determined account label is obtained after the query node initiates a federated learning application for the account label of the query list to the data provider, and performs federated learning for the account label between the node of the data provider; Control the on-chain node of the information chain to perform consensus verification on the re-determined account label; After the consensus verification of the first query request passes, update the re-determined account label to the first data table.

18. The method of claim 17, wherein, Before receiving the re-determined account label sent by the query node, the method further comprises: Receiving an account label update request sent by the query node, wherein the account label update request is generated according to the second encryption function, the fourth ciphertext and the re-determined account label after the query node constructs a second encryption function and performs secondary encryption on the encrypted query list using the second encryption function to obtain a fourth ciphertext; The on-chain node of the information chain performs consensus verification on the account label update request; After the consensus verification of the first query request passes, any on-chain node of the information chain performs secondary encryption on the plurality of encrypted account information in the first data table stored by the information chain by using the second encryption function to obtain a fifth ciphertext set, performs intersection operation on the fourth ciphertext and the fifth ciphertext set to obtain a fifth ciphertext, and updates the re-determined account label to the first data table according to the encrypted account information corresponding to the fifth ciphertext.

19. A data encryption query apparatus of a double-chain blockchain, characterized by, Comprise: The query list encryption unit is used for encrypting the query list, constructing a first encryption function, and performing secondary encryption on the encrypted query list by using the first encryption function to obtain a first ciphertext; The first query request generation unit is used for generating a first query request according to the first encryption function and the first ciphertext, and the first query request is used for querying the user label corresponding to the query list on the information chain; The first query request sending unit is used for sending the first query request to the information chain, so that, after the consensus verification of the first query request passes, any on-chain node of the information chain performs secondary encryption on the plurality of encrypted account information in the first data table stored by the information chain by using the first encryption function to obtain a second ciphertext set, performs intersection operation on the first ciphertext and the second ciphertext set to obtain a second ciphertext, queries in the first data table according to the encrypted account information corresponding to the second ciphertext to obtain the account label corresponding to the encrypted account information, establishes the corresponding relationship between the account label and the first ciphertext, sends the account label and the corresponding relationship between the account label and the first ciphertext to the query node as a query result, and the first data table comprises the corresponding relationship between the encrypted account information and the account label; The account label determination unit is used for determining the account label corresponding to the query list according to the corresponding relationship between the account label and the first ciphertext, the corresponding relationship between the first ciphertext and the query list, and the query list.

20. A data encryption query apparatus of a double-chain blockchain, characterized by, Comprise: The first query request receiving unit is used for receiving the first query request sent by the query node, the first query request is encrypted by the query node, a first encryption function is constructed, the encrypted query list is subjected to secondary encryption by using the first encryption function to obtain a first ciphertext, the first query request is generated according to the first encryption function and the first ciphertext, and the first query request is used for querying the user label corresponding to the query list on the information chain; The query unit is configured to, after the consensus verification of the first query request passes, control any one of the chain nodes of the information chain to perform secondary encryption on the plurality of encrypted account information in the first data table stored by the information chain by using the first encryption function, to obtain a second ciphertext set, perform intersection operation on the first ciphertext and the second ciphertext set, to obtain a second ciphertext, query the first data table according to the encrypted account information corresponding to the second ciphertext, to obtain an account label corresponding to the encrypted account information, and establish a corresponding relationship between the account label obtained by the query and the first ciphertext, wherein the first data table includes the corresponding relationship between the encrypted account information and the account label. The query result sending unit is configured to send the account label and the corresponding relationship between the account label and the first ciphertext to the query node as a query result, so that the query node determines the account label corresponding to the query list according to the corresponding relationship between the account label and the first ciphertext, the corresponding relationship between the first ciphertext and the query list.

21. A data encryption query system for a double chain blockchain, characterized by, The system comprises a query node and an information chain. The query node performs the method in any one of claims 1-12 when performing the query. The information chain performs the method in any one of claims 13-18 when performing the query. 22.A computer device, comprising a memory, a processor, and a computer program stored on the memory, wherein, The processor executes the computer program to implement the method in any one of claims 1-18.

23. A computer-readable storage medium, characterized in that, The computer readable storage medium stores a computer program, and the computer program is executed by the processor to implement the method in any one of claims 1-18.

24. A computer program product, characterised in that, The computer program product comprises a computer program, and the computer program is executed by the processor to implement the method in any one of claims 1-18.

Images